(2022-04-29) WikiGraph embeds not working on Firefox

Suddenly I've noticed WikiGraph embeds not working on Firefox (android). Another stop on the WikiGraph JavaScript Widgets Vs Browser Security saga.

Paul Wright found In looking at the page, it has been found that the site is sending only the domain name - i.e. http://webseitz.fluxent.com instead of http://webseitz.fluxent.com/wiki/TwinPages - this is triggering a new feature in Firefox 100

Now I see Firefox ignores several referrer policies for cross-site subresource/iframe requests to improve user privacy by preventing privacy leaks. These include unsafe-url, no-referrer-when-downgrade, and origin-when-cross-origin. I use unsafe-url.

Paul suggested I check out the WebCompatibility room in matrix.org, so I've found where he had the discussion with moz folks. Yes, this is an intentional "improvement" in privacy.

It may hit Chromium, too?

They suggest I just pass the full container URL directly as a query-arg like http://www.wikigraph.net/backlinks.js?url=http%3A%2F%2Fwebseitz.fluxent.com%2Fwiki%2FTwinPages

(If that becomes a problem, is CORS an alternative?

May18 - Mac Firefox just updated, now has same issue.

otoh, Firefox has so few users....

otooh maybe solving this will also be good for ios Safari users....

otoooh I don't want to play with Javascript...


Edited:    |       |    Search Twitter for discussion